> Andrew Morton wrote:> > Found a way to reproduce it - do `cat /proc/slabinfo > /dev/null' in a> > tight loop. With that happening, a little two-way wasn't able to make> > it through `dbench 4' without soiling the upholstery. Then bisection-searching.> > > It's surprising it was so subtle. I'd been running with that code for a > month or so without a peep of problem...>

It'll only bite if someone does snprintf() into a too-short buffer. That'srare (it's usually a bug). But it looks like the seq_file() code does itwhen someone is trying to generate more than PAGE_SIZE's worth of data. Like /proc/slabinfo.